共690篇文章。
之前一直有些头疼的ssh虫问题，很令人吃惊地找到了一个解决方法。在扫描感染IP的TCP特征之后，发现这些机器的共同特征——他们都用的是Linux。
很幸运地，我不使用Linux，FreeBSD附带的pf提供了一项非常有意思的强大能力(这项能力源于OpenBSD的pf)，即按操作系统来控制访问。其它用法还包括例如，禁止没有打补丁的Windows访问，让不同用的操作系统访问得到不同的内容等等。
考虑到Linux如此容易感染ssh蠕虫，我决定采用下述pf策略：
block in quick proto tcp from any os “Linux” to any port ssh
网站上的消息。这可能对FreeBSD 6.2-RELEASE造成一定的影响(re@的负责人Ken Smith在水牛城大学计算科学与工程系)，不过，re@的其它committer将继续此项责任。
没想到这么快……不过已经装了桌面的同学们，hia hia hia
今天终于尘埃落定了。
To quote M. Warner Losh (with permission):
So long as there’s old code, you can’t replace the copyright, unlessthe old code that remains is not protectable by copyright any more(eg, if it is just { and } lines).If you add your own implementation of the 50 lines in question, or move them to a separate file, then you can put your own copyright/license statement on the code you wrote.
FreeBSD基金会 又一次面临501(c)(3)资格问题。建议有此财力的人适当捐一些来帮助基金会达到募捐的要求。详情请参见首页。
For those who does not track FreeBSD-CURRENT -current@, Andre Opperamann (andre@) has just posted a new progress for his TCP/IP optimization:
An internal discussion happened in -developers@ has finally decided that we put ULE scheduler back to the “experimental” state, in order to reduce the number of reports about crashes and other bad things for it.
Currently the fact that ULE is not being actively maintained is the cause of this change. We hope that we can find someone who has interest on it. Additionally, it is worthy to have a look at David Xu’s new “CORE” scheduler (a ULE fork, using Linux’s algorithm).
以下内容为作弊条，仅供参考；只保证在FreeBSD下能用。
为postfix配置TLS的关键是产生自己的CA证书，并签署一年一续的服务证书。注意一定要保管好前者的私钥！
第一步，创建自签名CA：
mkdir /usr/local/etc/ca
cd /usr/local/etc/ca
mkdir certs crl newcerts private
echo 「01」 > serial
cp /dev/null index.txt
cp /etc/ssl/openssl.cnf openssl.cnf
vi openssl.cnf